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AMENDMENTS TO THE CLAIMS 

Claims remaining in the application are as follows: 

1. (Canceled) 

2. (Currently Amended): A method for off-line Personal Ident ification Number 
(PHsn verification using a smart card accessed on an off-line terminal, the method a c cording 
to Claim 1 furth e r comprising: 

creating a unique secret key for an enrolled smart car d using a card issuer private key; 
generating signatures on an entered PIN using the unique ke v. the signatures being 

verifiable bv the smart card and/or the terminal; 
entering an initialization PIN to the smart card at an enrollment system; 
generating a reference signature on the initialization PIN using the unique key and the 

initialization PIN; 
storing the reference signature on the smart card; and 
discarding the PIN after signature generation. 

3. (Original): The method according to Claim 2 further comprising: 
communicatively connecting the smart card to an off-line terminal; 
receiving a transaction PTN' at the off-line terminal; 

generating a candidate signature on the transaction PIN' using the unique key; and 
verifying the candidate signature against the reference signature. 

4. (Original): The method according to Claim 3 further comprising: 

for a verified candidate signature, unlocking the smart card to enable a transaction. 

5. (Currently Amended): A method for off-line Personal Identification Number 
(PIN) verification using a smart card accessed on an off-line terminal, the method aooording 
to Claim 1 furth e r comprising: 

creating a unique secret kev for an enrolled smart card using a card issuer private key: 
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generating signatures on an entered PIN using the unique key, the signatures being 

verifiable bv the smart card and/or the t erminal: 
entering an initialization PIN to The smart card at an enrollment system; 
generating the unique secret key based on the private key; 
generating at least one signature precursor from the unique secret key; 
storing the at least one signature precursor on the smart card; and 
discarding the PIN and the unique secret key. 

6. (Original): The method according to Claim 5 further comprising: 
communicatively connecting the smart card to an off-line terminal; 
receiving a transaction PIN' at the off-line terminal; 

communicating the transaction PIN' and an off-line terminal-generated random 

number to the smart card; 
generating a signature on the smart card based on the transaction PIN', the at least one 

signature precursor, and the random number; and 
verifying the signature at the off-line terminal. 

7. (Canceled) 

8. (Currently Amended): A method for o ff-line Personal Identification Number 
(PIN) verification using a smart card accessed on an off-line terminal, the method according 
to Claim 7 furth e r comprising: 

using PIN verification to unlock a smart card: 

enabling the unlocked smart card to perform a selected function in a financial 

transaction for a cardholder: 
creating a unique secret kev for an enrolled smart card using a card issuer private key; 
generating signatures on an entered PIN usinp the unique kev. the signatures being 

verifiable bv the smart card and/or the terminal; 
.computing at an enrollment system a secret key u that is unique to the smart card using 

an equation of the form: 
u = l d (modN), 
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where I is an entity-identifier, d is a private exponent in an RSA system known 
only to the enrollment sysiem, and N is an RSA system modulus; 
computing at the enrollment system a signature precursor A using an equation of the 
form: 

A = PIN" 1 u(modN), 

where PIN is an enrollment Personal Identification Number (PIN); 
storing on the smart card the signature precursor A, a public exponent e, the modulus 

N, and the entity-identifier I; 
computing at the smart card a digital signature component t using an equation of the 

form: 

t - PIN^mod N); 

hashing at the smart card a function Z=h(t, PIN, T) to compute a reference signature of 

the form: 

S = u-PIN 7 '(modN), 

where h() is a hashing algorithm; 
storing the reference signature S on the smart card; and 

erasing from the smart card the enrollment PIN, the secret key u, the digital signature 
component t, and function Z. 

9. (Original): The method according to Claim 8 further comprising: 
communicatively connecting a smart card to a transaction terminal; 
receiving at the transaction terminal a transaction PIN'; 

computing at the smart card a transaction secret key u', a transaction digital signature 
component t', and a transaction function Z', using respective equations of the 
form: 

u r = PIN'- A(mod N), 
t' = (PTN^(modN),and 
Z' = h(t',PINW); 

computing at the smart card a candidate signature S' using an equation of the form: 
S r = u'«(PlNO z '(modN); 
for S' - S so that PIN' = PIN, verifying PIN'; and 
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unlocking the smart card for a transaction for a verified PIN'. 

1 0. (Currently Amended): The method according to Claim ? 8 wherein; 
the smart card contains sufficient information to verify an entered PIN prior to 

proceeding to a transaction; and. 
the PIN is passed from a transaction terminal to the smart card and remaining 
verification operations are performed on the smart card. 

11. (Currently Amended): A method for offline Per sonal Identification Number 
(PTN) verification using a smart card accessed on an off-line terminal the method according 
to Claim 1 further comprising: 

creating a unique secret kev for an enrolled smart card using a card issuer private key; 
generating signatures on an entered PIN using the uniqu e kev, the signatures being 

verifiable by the smart card and/or the term inal: and 
enabling a financial terminal to perform a challenge-response protocol to determine 

whether the smart card and an entered transaction PIN' are valid for a financial 

transaction to proceed. 

12. (Original): The method according to Claim 1 1 further comprising: 
computing at an enrollment system a secret key u that is unique to the smart card using 

an equation of the form: 
u = l d (modN), 

where I is an entity- identifier, d is a private exponent in an RSA system known 
only to the enrollment system, and N is an RSA system modulus; 

transferring from the enrollment system to the smart card the secret key u, the identity- 
identifier I, a public exponent e, and the modulus N, and an entity-selected 
Personal Identification Number (PIN); 

computing at the smart card a signature precursor A using an equation of the form: 
A = PIN* 1 • u(mod N); and 

storing on the smart card the signature precursor A, a public exponent e, the modulus 
N, and the entity-identifier I. 
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13. (Currently Amended): The method according to Claim 12 further comprising: 
communicatively connecting a smart card to a transaction terminal; 

receiving at the transaction terminal a the transaction PIN'; 

transferring from the transaction terminal to the smart card a random number r t 

generated at the transaction terminal, and an entity-entered PIN'; 
waiting at the transaction terminal for a response; 
generating at the smart card a random number r c ; 

computing at the smart card a transaction digiial signature component t, a transaction 
secret key u', a hash function Z, and a signature S using respective equations of 
the form: 

t = (r, r c - PIN^ (mod N). 
u' = PIN'« A(mod N). 
Z = h(t, PIN' ? I) 
S = ii' ■ (r t - r c • PlN0 Z (tnod N), 
where h() is a hashing algorithm; 
transferring from the smart card to the transaction terminal the signature S and the 

digital signature component t; 
computing at the transaction terminal values Z = h(t, PIN', I); C - I ■ f(mod N); and 
S c (mod N); 

determining at the transaction terminal whether S° - C(mod N) s and 
if so, verifying the smart card-generated signature S, affirming that PIN' is equal to 
PIN. 

1 4. (Currently Amended): The method according to Claim 1 1 wherein: 
the smart card on PIN verification performs operations that verify smart card 

possession of a secret key created and installed at enrollment of the card, and 
that verify that a the Transaction PIN' entered by an entity matches the PIN at 
enrollment; 

the verification operations are performed without having the enrollment PIN stored on 
the smart card; and 
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verification occurs without the smart card revealing the secret key to the transaction 
terminal. 

15. (Currently Amended): The method according to Claim 4- 8 wherein: 

the card issuer private key is an RS A (Rivest, Shamir, and Adelman Public Key 
Cryptosystem) key. 

16. (Original): A data security apparatus comprising: 

a smart card capable of off-line Personal Identification Number (PIN) verification 
comprising: 

an interface capable of communicating with an off-line terminal and an 

enrollment system; 
a processor coupled to the interface; and 

a memory coupled to the processor and having a computable readable program 
code embodied therein that executes off-line PIN verification based on 
creating a unique secret key for an enrolled smart card using a card 
issuer private key and generating signatures on an entered PIN using 
the unique key, the signatures being verifiable by the smart card and/or 
the off-line terminal. 

17. (Original): The apparatus according to Claim 16 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to receive an 

initialization PIN from the enrollment system; 
a computable readable program code capable of causing the processor to generate a 

reference signature on the initialization PIN using the unique key; 
a computable readable program code capable of causing the processor to store the 

reference signature on the smart card that is generated from the PIN; and 
a computable readable program code capable of causing the processor to discard the 

PTN without storage after signature generation. 
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J 1 8, (Original): The apparatus according to Claim 1 7 wherein the memory 

further comprises: 

a computable readable program code capable of causing the processor to receive a 

transaction PIN' via the off-line terminal; 
a computable readable program code capable of causing the processor to generate a 

candidate signature on the transaction PIN' using the unique key; and 
a computable readable program code capable of causing the processor to verify the 

candidate signature against the reference signature. 

19. (Original): The apparatus according to Claim 18 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to enable a 
transaction for a verified candidate signature. 

20. (Original): The apparatus according to Claim 16 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to receive an 

initialization PIN from the enrollment system; 
a computable readable program code capable of causing the processor to generate the 

unique secret key based on the private key and the initialization PIN; 
a computable readable program code capable of causing the processor to generate at 

least one signature precursor from the unique secret key; 
a computable readable program code capable of causing the processor to store the at 

least one signature precursor in the memory; and 
a computable readable program code capable of causing the processor to erase the PIN 

and the unique secret key without storage. 

21. (Original): The apparatus according to Claim 20 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to receive a 
transaction PIN' and a random number from the off-line terminal; 
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a computable readable program code capable of causing the processor to generate a 
signature based on the transaction PIN', the at least one signature precursor, 
and the random number; and 

a computable readable program code capable of causing the processor to send the 
signature to the off-line terminal for verification. 

22. (Original): The apparatus according to Claim 16 wherein the memory 

farther comprises: 

a computable readable program code capable of causing the processor to receive from 
an enrollment system a secret key u that is unique to the smart card and a 
signature precursor A, the secret key u being defined by an equation of the 
form: 

u = I d (modN) 5 

where I is an entity-identifier, d is a private exponent in an RSA system known 

only to the enrollment system, and N is an RSA system modulus, 

the signature precursor A being defined by an equation of the form: 
A = PIN" ! - u(mod N), 

where PIN is an enrollment Personal Identification Number (PIN); 
a computable readable program code capable of causing the processor to store in the 

memory the signature precursor A, a public exponent e 9 the modulus N, and 

the entity-identifier I; 
a computable readable program code capable of causing the processor to compute a 

digital signature component t using an equation of the form; 
t = PIN c (modN); 

a computable readable program code capable of causing the processor to hash a 
function Z=h(t, PIN, I) to compute a reference signature of the form: 

S = u-PIN z (modN), 
where h() is a hashing algorithm; 

a computable readable program code capable of causing the processor to store the 
reference signature S in the memory; and 
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a computable readable program code capable of causing the processor to erase the 
enrollment PIN, the secret key u, the digital signature component t 5 and 
function Z from memory. 

23. (Original): The apparatus according to Claim 22 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to receive from 

the transaction terminal a transaction PIN'; 
a computable readable program code capable of causing the processor to compute a 
transaction secret key u' 7 a transaction digital signature component t', and a 
transaction function Z' using respective equations of the form: 
u'-PIN'- A(mod N), 
t f =(PINO e (mod N),and 
Z'-h(t',PIN' B l); 

a computable readable program code capable of causing the processor to compute a 

candidate signature S' using an equation of the form: 
S' = u''(Pn^ z '(mQdN); 
a computable readable program code operative for S' = S so that PIN' = PIN and 

capable of causing the processor to verify PIN'; and 
a computable readable program code capable of causing the processor to enable a 

transaction for a verified PIN'. 

24. (Original): The apparatus according to Claim 16 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to receive from 
an enrollment system a secret key u that is unique to the smart card, the 
identity-identifier I, a public exponent e ? and the modulus N, and an entity- 
selected Personal Identification Number (PIN), the secret key u being defined 
by an equation of the form: 
u = T d (mod N), 
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where I is an entity-identifier, d is a private exponent in an RSA system known 

only to the enrollment system, and N is an RSA system modulus; 
a computable readable program code capable of causing the processor to compute a 

signature precursor A using an equation of the form: 
A = PlN" 1 «u(modN); 
a computable readable program code capable of causing the processor to generate a 

random number r c ; and 
a computable readable program code capable of causing the processor to store in the 

memory the signature precursor A, a public exponent e, the modulus N, and 

the entity-identifier L 

25. (Original): The apparatus according to Claim 24 wherein the memory 

further comprises: 

a computable readable program code capable of causing die processor to receive from 
the transaction terminal a random number r» generated at the transaction 
terminal, and an entity-entered PIN r , and a random number r c generated in the 
smart card; 

a computable readable program code capable of causing the processor to compute a 
transaction digital signature component t, a transaction secret key u', a hash 
function Z 5 and a signature S, using respective equations of the form: 
t = (r t • r c - PINO 6 (mod N), 
u'-PIN'- A(mod N), 
Z = h(t, PIN', I) 
S-u'(r t 'r c -PINO z (modN), 
where h() is a hashing algorithm; 
a computable readable program code capable of causing the processor to transfer from 
the smart card to the transaction terminal the signature S' and the digital 
signature component t; 
a computable readable program code capable of causing the processor to compute at 
the transaction terminal values Z - h(t, PIN', I); C = 1 • f(mod N); and S e (mod 
N); and 
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a computable readable program code capable of causing the processor to determine at 
the transaction terminal whether S c = C(mod N), and, if so, verify the signature 
S> affirming that PTN' is equal to PIN. 

26. (Original): The apparatus according to Claim 16 wherein: 
the card issuer private key is an RSA (Rivest, Shamir, and Adelraan Public Key 

Cryptosystem) key. 

27. (Original): A data security apparatus comprising: 
an enrollment system capable of usage for off-line Personal Identification Number 

(PIN) verification using a smart card accessed on an off-line terminal, the 
enrollment system comprising: 

a communication interface capable of communicating with a terminal 
configured to accept a smart card that executes off-line Personal 
Identification Number (PIN) verification; 
a processor coupled to the communication interface; and 
a memory coupled to the processor and having a computable readable program 
code embodied therein capable of causing the processor to initialize 
and personalize a smart card for usage in creating a unique secret key 
for an enrolled smart card using a card issuer private key, and 
generating signatures on an entered PIN using the unique key, the 
signatures being verifiable by the smart card and/or the terminal, 

28. (Original): The apparatus according to Claim 27 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to compute a 
secret key u that is unique to the smart card using an equation of the form: 
u = r'(modN), 

where I is an entity-identifier, d is a private exponent in an RSA system known 
only to the enrollment system, and N is an RSA system modulus; 
a computable readable program code capable of causing the processor to compute a 
signature precursor A using an equation of the form: 
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A = PIN" 1 *u(modN), 
where PIN is an enrollment Personal Identification Number (PIN); 
transmitting to a smart card for computation and storage the signature precursor A, a 
public exponent e, the modulus N, and the entity-identifier I, the smart card 
being capable of computing a digital signature component t using an equation 
of the form: 

t = PlN e (mod N); 

hashing at the smart card a function Z=h(t, PIN, I) to compute a reference 

signature of the form: 

S - u PIN*(mod N), 

where hQ is a hashing algorithm, storing the reference signature S; and 
erasing the enrollment PIN, the secret key u, die digital signature component t, 

and function Z. 

29. (Original): The apparatus according to Claim 28 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to compute a 
secret key u that is unique to the smart card using an equation of the form: 
u = ^(mod N), 

where I is an entity-identifier, d is a private exponent in an RSA system known 
only to the enrollment system, and N is an RSA system modulus; 

transferring to the smart card the secret key u, the identity-identifier I, a public 

exponent e, and the modulus N, and an entity- selected Personal Identification 
Number (PIN), the smart card being capable of computing at the smart card a 
signature precursor A using an equation of the form: 
A-PIN" 1 ' u(mod N); and 

storing the signature precursor A, a public exponent e, the modulus N 5 and the entity- 
identifier I. 

30. (Original): A data security apparatus comprising: 



-Page 13 of 20- 

PAGE 1 W22 * RCVD AT 12/15/2005 6:43:38 PM [Eastern Standard Time] ft SVR:USPTO-EFXRF-6/30 * DNIS:2738300 * CSID:9492510260 ; DURATION (mm^):06^0 



I2SS2 MnCA RTKL R BLVO 
SUITS -MX 
IRVINE, CA 9261 : 
1UL M I <WG 
PAKW9) 2*1-0340 



12/15/2005 16:52 FAX 9492510260 KOESTNER_BERTANI_LLP ©016/022 



KOMTNIR BHUTAN tl.r 
[Mil MaCaRTHUR BLVD. 
SUITE «a 
IKVINK, C* WhlS 

lBl,<««)J!l|-CW0 



30. (Original): A data security apparatus comprising: 

an off-line terminal capable of usage for off-line Personal Identification Number (PIN) 
verification using a smart card, the off-line terminal comprising: 
a communication interface capable of accepting and communicating with a 

small card that executes off-line Personal Identification Number (PIN) 

verification; 

a processor coupled to the communication interface; and 
a memory coupled to the processor and having a computable readable program 
code embodied therein capable of causing the processor to interact with 
the smart card to verify an entity-entered PIN using a signature 
generated on a reference PIN, the signature being generated based on a 
unique secret key of an enrolled smart card derived from a card issuer 
private key. 

3 1 . (Original): The apparatus according to Claim 30 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to communicate 
with the smart card; 

a computable readable program code capable of causing the processor to receive a 

transaction PIN'; and 
a computable readable program code capable of causing the processor to operate in 

conjunction with the smart card to generate a candidate signature on the 

transaction PIN' using the unique key, and verify the candidate signature 

against a reference signature, 

32. (Original): The apparatus according to Claim 30 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to communicate 
with the smart card; 

a computable readable program code capable of causing the processor to receive a 
transaction PIN'; 
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a computable readable program code capable of causing the processor to generate a 
random number; 

a computable readable program code capable of causing the processor to communicate 

the transaction PIN', and the random number to the smart card; and 
a computable readable program code capable of causing the processor to operate in 
conjunction with the smart card to generate a signature based on the 
transaction PIN', the at least one signature precursor, and the random number; 
and verify the signature, 

33, (Original): The appaiaius according to Claim 30 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to communicate 
with the smart card; 

a computable readable program code capable of causing the processor to receive a 

transaction PIN'; and 
a computable readable program code capable of causing the processor to operate in 
conjunction with the smart card to compute a transaction secret key u', a 
transaction digital signature component t', a transaction function Z\ and a 
candidate signature S' using respective equations of the form: 
u' = PIN'- A(mod N), 
t'=(PINO e (modN), 
Z' = h(t',PIN', I); and 

S ' = u' • (PIN') z '(mod N), and verify whether S ' - S so that PIN' = PIN, 
verifying PIN'. 

34. (Original): The apparatus according to Claim 30 wherein the memory 
further comprises: 

a computable readable program code capable of causing the processor to communicate 
with the smart card; 

a computable readable program code capable of causing the processor to receive a 
transaction PIN'; 
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a computable readable program code capable of causing the processor to transfer to 
the smart card a random number r t generated at the transaction terminal, and 
the transaction PIN'; 

a computable readable program code capable of causing the processor to wait at the 

transaction terminal for a response; 
a computable readable program code capable of causing the processor to operate in 

conjunction with the smart card to generate a random number r c ; and 
a computable readable program code capable of causing the processor to operate in 
conjunction with the smart card to compute a transaction digital signature 
component t, a transaction secret key u r , a hash function Z, and signatures S 
and C, using respective equations of the form: 
t=(ri-r c -PINy (modN), 
Li' = PIN f - A(modN), 
Z = h(t,HN',I), 
S = u , '(r r r c -PIN') z (modN) l 
C = I-t 2 (modN) 

where b() is a hashing algorithm, and determining at the transaction terminal 
whether S e = C(mod N), and if so, verifying the signature S, affirming that 
PIN' is equal to PIN. 

35. (Original): The apparatus according to Claim 30 wherein: 

the card issuer private key is an RSA (Rivest, Shamir, and Adelman Public Key 
Cryptosystern) key. 

36. (Currently Amended): A transaction system comprising; 
a network; 

a plurality of servers and/or hosts mutually coupled to the network; 

a plurality of terminals capable of communicative coupling to the servers via the 

network and capable of off-line PIN verification; 
a plurality of smart cards capable of enrollment in the transaction system and capable 

of insertion into the terminals for performing transactions; and 
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a plurality of processors distributed among the smart cards, the servers, and/or the 

terminals, at least one of the processors being capable of performing a method 
for off-line Personal Identification Number (PIN) verification comprising: 
creating a unique secret key for an enrolled smart card using a card issuer 
private key; and 

generating signatures on an entered PIN using the unique key, the signatures 
being verifiable by the smart card and/or the terminal: 

entering an initialization PIN to the smart card at an enrollment system; 

generating a reference signature on the initialization PIN usi ng the unique key 
and the initialization PIN; 

storing the reference signature on the smart card: and 

discarding the PIN after signature generation . 

37. (Currently Amended); A transaction system comprising: 

means for verifying a Personal Identification Number (PIN) using a smart card 

accessed on an off-line terminal; 
means for creating a unique secret key for an enrolled smart card using a card issuer 

private key;-aa4 

means for generating signatures on an entered PIN using the unique key, the 
signatures being verifiable by the smart card and/or the terminal^ 

means for entering an initialization PIN to the smart card at an enrollment system: 

means for generating a reference signature on the initialization PIN using the unique 
key and the initialization PJN: 

means for storing the reference signature on the smart card: and 

means for discarding the PEN after signature generation . 

38. (New): A transaction system comprising: 
a network; 
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a plurality of servers and/or hosts mutually coupled to the network; 
a plurality of terminals capable of communicative coupling to the servers via the 
network and capable of off-line PTN verification; 
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a plurality of smart cards capable of enrollment in the transaction system and capable 

of insertion into the terminals for performing transactions; and 
a plurality of processors distributed among the smart cards, the servers, and/or the 

terminals, at least one of the processors being capable of performing a method 
for off-line Personal Identification Number (PIN) verification comprising: 
\ creating a unique secret key for an enrolled smart card using a card issuer 

private key, 

generating signatures on an entered PIN using the unique key, the signatures 

being verifiable by the smart card and/or the terminal; 
entering an initialization PIN to the smart card at an enrollment system; 
generating the unique secret key based on the private key; 
generating at least one signature precursor from the unique secret key; 
storing the at least one signature precursor on the smart card; and 
discarding the PIN and the unique secret key, 
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